A 2026 WordPress supply-chain attack allegedly turned 30+ sold plugins into a dormant backdoor oper… This is what a real WordPress supply chain attack looks like in 2026. It was not a typo-squatted ...